Re: SSL-Tunnel blocked?
- From: "Phillip Windell" <philwindell@xxxxxxxxxxx>
- Date: Wed, 13 Feb 2008 10:03:14 -0600
The log type shows Web Proxy,...which is more limited in capabilities than
the Firewall [winsock] Service.
The status says it was aborted because of a "thread exit or an application
request".
My guess is that something is being attempted that the Web Proxy Service
cannot perform.
My suggestion is to install the Firewall Client on the Workstation. If it
still fails try it again with the proxy settings disabled in the browser
(forcing it to use the Firewall Service).
--
Phillip Windell
www.wandtv.com
The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
<davidh@xxxxxxxxxxxxxxxx> wrote in message
news:86c0d1ef-da47-42b4-a0d7-4440d008c04a@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Within the Microsoft Office products, there are occasions when content
from the internet needs to be accessed. For example, to get clip art,
design templates, or help. When we try to pull design templates from
the net into Powerpoint, ISA blocks the request, the output is shown
below. I am guessing that since ISA cannot look at the traffic inside
the SSL tunnel, it errors on the safe side and blocks this traffic. Is
there any way to allow this on my ISA 2006 server?
The other thing that is a bit confusing is my web access rule allows
HTTP, HTTPs, and FTP. What is the difference between allowing HTTPs
traffic and denying SSL-Tunnel?
One more piece of possibly relevant information, we are running in one
nic mode and just using ISA for web proxy. This will be changed in
about a month as we put ISA inline and use all of its capabilities.
Failed Connection Attempt
WINISA01 2/12/2008 1:22:28 PM
Log type: Web Proxy (Forward)
Status: 995 The I/O operation has been aborted because of either a
thread exit or an application request.
Rule: WebTraffic Out
Source: Internal (10.121.90.14)
Destination: External (131.107.115.40:443)
Request: mpa.one.microsoft.com:443
Filter information: Req ID: 0c762fb6; Compression: client=No,
server=No, compress rate=0% decompress rate=0%
Protocol: SSL-tunnel
User: VCS\HendersonD
.
- References:
- SSL-Tunnel blocked?
- From: davidh
- SSL-Tunnel blocked?
- Prev by Date: Re: ISA Not Allowing Sites by IP
- Next by Date: Re: SSL-Tunnel blocked?
- Previous by thread: SSL-Tunnel blocked?
- Next by thread: Re: SSL-Tunnel blocked?
- Index(es):
Relevant Pages
|
